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(57)Abstract 

PROBLEM TO BE SOLVED: To allow a single firewall to support plural users having separate security 
policies. 

SOLUTION: A firewall introduces a session key with respect to a packet selects at least one security 
policy among plural security policy based on the session key and uses the selected security policy to 
authenticate the packet In the embodiment the session key includes items derived of header information 
of the packet The items are, e.g. an Internet protocol IP source/destination address, a protocol of a next 
level, a source/destination port related to the protocol. Furthermore, the protocol of the next level is, e.g. 
a transmission control protocol TCP or a user datagram protocol UDP. The security policy copes with a 
different group or a different sub group in a given group. 
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jiy-t-sWiSitiSfts. 

[0 0 2 6] #r3*y£ : ^-vy-ya^i^r- 
STW^r-rlfT-rftLOfHSo 10 

[00 2 7] #r3*y£ : 'J -by h-feyyay 
DiW:YES(Dl^> TC P-feyJ/aytttl/t, 
y*a*-r&7*H*K:3**J'a;'0if*lCTCPy 
-fey h*3S*. 

[0 0 2 8] *r=ry£ : /l/-;l/*^A77 h 

[0 0 2 9] *f:Jy*:|NttH»J« 

USE : )l-Mcttt%M!&7tfJ 7155, 
[0 0 3 0] *fd^ :»7»lltl 20 

mm ■■ jk-fr\ctttsm779T4 7vifflo 

[00 3 1] *r JU* : 8Iltl»7HHry >jfi£ 
K$3 : Y E S <Di§a* C0/V-;VK±tjTlf RnSftfc-fe 

y->3 yiiwia«7«fKifii(kiii)*n5. 

[0 0 3 2] *r^y*:tt#H«v^ir 

mm : flc#H«vx*£„ 
[0 0 3 3] *rdf'J^ : ATM y*7x-X 

[00 3 4] #r3*y£ : tiJ2Ky*7x-X 

mm:>vrvvwmi$-znz'(y*7x-z% i < > 30 

[0 0 3 5] Ardfy^ : la-fey^ay 
SJW : ESefl&rt. YES -fe y 1/ a y<Ol$te 

[0 0 3 6] rtf-rfy* : 77-A3-H 
Sift : ;l/-/P*fl£075-£KtStfMt*fc»fcffl^ 
&n*7?-A3-Ktt. 

[0 0 3 7] *r=fy«: V-X^Xl-vyT^lz-T' 
ftQ: I P7KUX, Sfcfi, vyT^O^XM P7 
FU**£&*Xb^l/-7 , o 

[00 3 8] Af^'JS: 7-X*XhVy T^-fT 1 40 

mm ■ Hffsnsvy vyyoiwf (mar, ry- 
rg»j ) „ 

[0 0 3 9] AfdW : fXrf *-v'3y*Xl>v 

mm: I P7KUX, Sfcli, 7^JtO*XH P7 

[0 0 4 0] *fJ'^ : rXr-Y^-yay^XFv 
yT'^T' 

mm •■ nffsftsvy yzyvnwf (ma. r?- 
**^(* rtifij ) , so 
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[00 4 1] *r=fy«:tf- exvy^lz-T' 
18$ : V'^JtOfXf-f^v'a y#- h##*fctt 

[0 0 4 2] *rn*y« : -9--tfXVyy^^y 
USE : HfT^nSVy £y^©*^7 (ma. r/- 
/l/j fcft^tt rggj ) „ 

[0 0 4 3] *r3*y*:«*ffiffl«a» 

[0044] *rjy* : xkmwm 
mm •■ $xWcm\ic7tT4 7T*&z<itmm 

fc, CO;I/wI/fc±oTITOSft* , fey$'al'0JI* 

[0 0 4 5] *r^y* : 3fc?-ft7KbX 
ftti : /^y F<D3e-*^P.n57yyy-^3 y© 

[0 0 4 6] £r3"y£ : 

y7KU^6*rfynh3;HcaS5. jPfUM P'vy* 
*W5ry hfciifclStlS. 
[0 0 4 73 *fJ'J«: 

ISJiB: hy*y>4WjB8fc&5fc**jST. NULL 
©S£, *-iy*tt*B?fc*o I Nfllp> A^J-try 

i/a >ii h>*y y7SftT^4«*fttfasai/\, ou 

T©«a, /^yh*h>*y>y-r*7*S/ay*W 
JHf*. BOTH©*^ S**ffd. 
[0 0 4 8] *rrfy«: I PSEC&ft 
ffllfl: IPt+aUf-f (I P S EC (IP Security)) 
AUItf&Sfc&S t * NULL ©Jf£, f-x y 
*fi*g7fc*o I N©if£, Wjt^/aytt I P S 

Ecm^xumtt\x^mtam^fji\,\ out© 
i p s e c umzmnt %7>?i/3 v*m+ 

BOTH ©if p\ MfifcffSo 

[0049] *r3*y* : i/-yyxs^7>^A{fc 

Kifl : TC P'y—5r>^##*7y^Aftt«*^a 
><, T7*/VMiN0T'&3„ 
[0 0 5 0] *fi'J* : Syn Ston&a 

mm--syn sto™a»^5<ofiai*ffi«i'*. f7** 

HiN0T*&3„ 

[o o 5 1 ] *r=ry* : 'm=f-\^tm 
mm : y e s©i§£, »^y h{±(5ii;7^v'3 yr- 
* t y y a C ffi- \ * ;M3 «t ff fflf - 1 * 5 . 

r7*;Pht4YEST*S. 

[0 0 5 2] 2. «ttf**^^ry H7^;^yy^ 
*«WK*«3>lia-**y h7-^77'C77*- 

;i/fi> r«a8fif*j /^y h7-f;i/^y>^*fiJffl-r* 
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mwrv h7j)l$V>m, ^fi^y FfcJtf 
*;V-;l/ffiaiSfll**+yS'aU *+«y>a 

ftfc*7 h7-^t7^a>©;^'y FK;l/-;l/-fe7 F 

%afflbrce»%*+y'>au iwii;*-y h^-^-tr^ 

i/ 3 y 6 / ^ 7 j. 7 7 >f 7 7 * - Mt fm 

fflt5£«^4<a:5CkKJ:»), fie*©77Y77* 

[0 0 5 3] +i"^->axyh'J©S[ti;l/-;l/0^co{Rj 

iltf/vyS/aT-TVI/fcffl^fc) *3lf>rtt*&Bi:1-* 

3>*-J , /n- F*7x 77 FbXlf IB, ^>*7x- 
xflffi, afflRrt6«:;P-^o», 77-2*3- F\ Sett 

■feyS/aV*-ttv /<<7«y FrtT'iMMSft^r- 
*Ett*nSftfC>&< i: 1 OGK\v*nilB*3*, * 
HT'li, ( i ) -TV*-*? F7n ha;K I P) V 
-X7Fl^X, (i 1) I PfXf-^^-^a ^7 FU 
X> (1 i 1) ^0DU^;I/O7'oh3;l/ (0Uff, 
Mfp/nha;!/ (TCP) Sfctta-^ W-ZVyL? 
n>a;KUDP)), ( 1 v) 7*o h3;HcR«tJtt 
5ftfcy-*#-K fccfctf (v) TnFa/VEMltJ 

tt. ■by*>a>*-K3*LT» l|@ ( i ) fcitf (i 
i) ttfl9Jt*;£*iT^*. SB (I i i) ~ (v) 
tt, BSUT TT E L N E TJ fcitf TMA I L J T'S£ 

[0 0 5 4] 77^77*- H/f(4, CdT* rF^fV 
•tftf— YxyVy (DS E (domainsupport engine)) i: 
"M3!Wrfc5>a-/l/ (x^y) ff, frU^7F7- 
7 -> 3 >K*f LTl^ftUMr+a «J r 4 * U S/-* 

ft. y-X F^'f >e«fctfr^rY *—>a y F^-l* V 
O-t+a'Jr-f #y^-lc«J:r3T*S*ftftttntf45 

<<y*-*"v h^fafyoz^ti/ayx-lt. 
O F^>f ^OttaEO^^fT^ftSRliiltttfWV^. D S 
E«\ A73£ fcttfla*? F7-^V*7x-Xfc, 
&/<<T7 Ffl5y-X*fttt7 , ^r-r*-5'3>*'y F7 
-^FPXEg^T. F^^r>aiR*fT5. V-X 
SfctifXf^->3 y©7 Fl/XSv^y FE#i6 
SCfcKJtK a»Oa— «f««, #-©*7 F7-^ 
>*7x-XK*oTtf#-FSft*cfcj"Mtei:J8: 
5 0 Afif/ctttt^*? F7-^:/*7x-Xtt, * 
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7 F7-^>*7x-^*-F (N I C) (W*tf-r 
yrMKlntel Corporation)** S> rtjflg£ftTV?> Intel 
EtherExpress Pro 100BA-F) ©JBHSOfeOffRrtET 

[0 0 5 5] 05fcJ:tf06«:, aSOFjWfc"** 
-Ft57 7^77*-;Wc<fc5/^y F©S©£tti5it 
niT'^So coiSftftSB, /*7«y Ffffr< F*-f 

y#MBfu afflnrii^v-^ssaELT^^-y F««a 
o r t «fc ^ if 9 ^%sib u ftftj^'ftsmnfr & 

10 WWfS 77*77*- ^'i, *F*-f 

VKtt l"3W±0*y F7-^^y^7x-X*WcJ 

ite.n5o ffl»oF^-ry*-9-*-n-5>ry*7i- 

Xtt, I P7FUXl/V^*ffl^T, /^yFSEBJt 
S.kSKflfcSftS. UTOar-yTTteSftS. 

[0 0 5 6] 50 1 : I P/^-y Ftf-f^^x-XT* 
77*77*-M:J;!>3fiSft5. 

[00 57] 50 2 :/Vryh<Dl P^y 

ayi—mmnzo 

[0 0 5 8] 50 3 : ^ftKD-fy* 7 x-XAV^-y 
20 F*S«Lfca\ 43*tf, v hOV-X I P7 

Fl/XfcS'tJ^T, 7-XF^-r>A\ H7*J«fctfH8 

OfrSftV^, 7 s n-bX«Xr>y7 , 5 0 5filjfR^„ 
[0 0 5 9] 50 4 :7r i y7 , 5 0 2^e>^-lr-y>3y 
*-?:fflv^T, y-^F^-ryo+fys/a-eo-a* 
IBRt*. *+>yJ'artK:-Stf»»K 7ti/ayff 
TJi^j ©1^, /<-7yhtt**«ti, T'D-bxtiXr 
77*5 0 ltRS, *fy->arttc-a*^V>l^ y 
-XF^^yco;I/-;l/-tr-y FT*-&£#S?irf 3 0 
30 7^->3>A' rjJBti T*4v^, 7d 

■bX«XT7 7 , 5 0 5fCltfo )V-hX— mt&*). 7 

S/atd»5n, /<y«yh{i**Sti, 7"n-tX{iXr 
7 7501 tcM5„ ;V-;l/T*-a^4^^ '^7 F 
!4IBH*ft, yn«lt7ff75 0 1 fc^So 
[0 0 6 0] 5 0 5 : ^-77 F©n-A;l/X'J 7*7 F 
7-^ (LAN) 7FUX%ffl^T, y-7. F 

^LTi/^^tti, f©fxr-i'^->3W y*7 
40 x-xte e kt;;l/-7 L i'>'yr-7;^ffli/^T> rXf-f 

[006 1] 5 0 6: f^f^-v-a y^>7i- 
XfcJ:ri^<77 FOr^r-f *-S/3>7 FU^*ffl^ 

X r ^ *- a y F p< > mmc HA t F * 4 y t 
-atS«^» 7 , n-feXtiXr77 , 5 0 8K!ty o 
[0 0 6 2] 5 0 7 : y-ZF^-OKBBtT^r'yT* 

50 ^F^'OCHLTv *+7->a;V7^777'i:, £fi 
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■pSfttf ;U-;Hr 7 F ;1/ 7 * 7 7 7*fr a . 
[0 0 6 3] 508 i/tyy btcMf&2tli)V-Mfi7 

££/*77 F£SiJ<D/^7 hrtK»A*3<: 
k ( ny*i\s*-7i/ny\ ) *g#T*«&. 7n-fe 

»t^r«y^5 0 5KR*. 
[0 0 6 4] 5 09 :/<fry hftVftiOFjWKBB 

LTfcjaasnft*^fc*£, 77^77*- ;vbt*# 

ft<D7 * -fex;l/-/Wc fcttfeft W 7 x-x 10 

/^7 n4*KRriiiT**. 

[0 0 6 5] 5 1 0 : tlXQTti/aVQNSW fil 
U Tife-afc^ /^77F«;)ISft*7F7-^y 

[0 0 6 6] ^7h7-^^y^7x-X^f>Fy'r 
y\©MMSfty y^OfcfeC F^Vr-TVl/tfffl^ 
5.n5o ^V*7x-X*^©F;WyKckoT«£ 

BTfcUl^SftT^*. 1*©4^7FUX 20 

[0 0 6 7] H8(C, ±IS<OXT77 , 5 0 3fcJ:tf5 0 
6 T'Uff * n* J: 5 ft F * 4" > r- 7;WEa*fll;j** 
5o cn{cfiWT<DXT7 7 , tf#£tU. 

[0 0 6 8] 70 1 : Y*'<yf--7)\'T"<yZ73L- 

[0 0 6 9] 7 02 :-a**r-7^x>hy#ao 
fro/cif£, Lfrfc, I P7F^X^:/SW-a'r*T 
-7J^x:/^yEfc^5*£, /Vry F7FbXtf ; £<DU 

[0 0 7 0] 7 0 3 : -Sl-SfcOffftl^S 

[007 1] 3. tfc$W$VX* 
fiaj^.ffRealAudiofC J: o Tffl^ 6*1* 7*n F n;KD J; 5 
ft, WW 6 a— «fKR«giJfflOi6iOO*y F7-*-fe 

vx^*#tfCk*^T*fe5 0 fc£L*ftfck MftL 40 
T7*r*7T*5E3ftJB#fi03*»S/3:/ Of ft 
feS, 7-X£rX7M*->'3y<D7FUX£A*ig 
Uca^yay) *<S*«^iclB*. *0*S*, 77 
'T77*-;U±KSJfflO*5V^tt7'o*5'077 , U^- 

[0 0 7 2] *58WE«k4tt#B«v^*a:, *7->3 

> * a- 7 s/ a k m % nfcra^*%£«t 5 C t T< * 
*o -rx*TS«sn*t^ro7^-;i/F*. 

5/ a fl©*tet * 7 -;U F t Itm £ C t K <fc o T, 

-sotfcffwjesn*. Tx^rtoa7-f-;wFi4Jt so 
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REffllf^tlftl^o 

[0 0 7 3] Mfv^^tt, (a) /^yhrtOffif 
S» (b) F©v-x-fy*7x-x, fcJ: 

tf (c) F*ni»**fc»fcttfc£ftttfttf 

ft&ftlMOSfctt^<Ofr©ffi#fcff, ^ffll/T. * 

7 F 7-^*7^ 3 vonswv^-y FfcWt 

h#7r-f77*-;W«:J:-3Tffl8;£ft*fc, ttJSt* 
xy F y 7 ^aKflsfift*. 
[0 0 7 4] B9IC, B30fc0*BtlW)7*- V-y F 
Tf, flc#HS&vx* ( rt.yh* 7 yM ) 
-/l^*f 0 WT0<fc$ft1$*ftE9tf, v><ofro* 
Xh«U5. (i) TF7FJ E9 C ) ftfSt 

(i i) *+U7FfS*f (") it, fttoDKS4«*r 

rk7FA7>Fj sssn^^^av^ksn 

5fc*fc*+yS'artfcMofr&4t*fttfft&ft^-S 
OSl^f. M*tf, rR EA L AUD I OJ 

M «f!& VX * T'«, 1 &<D&m<D T C P -b 7 5" 3 
Vtf7*TY7"T'&SHtK UDP/^7 

TTELNETJ Tit, ] ) V—7.<Di&MM1tWi<!Tclbfc 

So 

[0 0 7 5] m 1 0fcttSH«"7**jM*W^'f *. 

[0 0 7 6] 90 1 :/<y>yF*a^U ■feyS'aV* 

[0 0 7 7] 9 0 2 : 7 p n-bX&/l'-;Hr7 hx>F'J 
§«|{cffla-r5c 4A6nfe/b-;l/TMS*^o*>5ft 

/VFtfaw>«a, T'n-bX{iXT7 7 , 9 0 5{cfR^ 0 
[0 0 7 8] 90 3 :/^7F43<fct>Vy^7x-Xlf 
*+y^a«*«Bfi«t (ffliltf, W^*) <0^fig 
K^ASn*. &#l^vx^tcfev>Ta— lfi2iE7v 
W-b7 F^nr^Sl^ *+y^aa««l5fi(*fc* 
*t*Wte"r«75^-fe'y H*nS. C<DXf77U 

[0 0 7 9] 90 4 :*f7->aT*, **yi/a.8£M 

[0 0 8 0] 90 5 :«»^7yF^t7 F*7>FW 

2. 7*5/3 >tf*ff«tl«. C«DJ:?ft7*i/3y^ 
m ***«5^tt7'n*s/*^trci:*«5ri)fiT«5. 
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'>fti^*£, T'n-feXteXr 7 7*9 0 2EMD, #£>* 
-;WdOo co^fyyB, IBI£-&0iSliE3StJv>T 

;l/-*©7 * i> s ygR#£5Q.a L T ^ 5 o 
[00 8 1] ±lsoffi#Hlvx^ffla^#ty;v-;Uffl 

0Mp£ftTV3©T% \WOt<X<Drt>rv Mi, CO* 10 
[0 0 8 2] 4. 

f)ft;l/-;l4i, W*tf;l'--;W6axy5;:/E«fct>T, 7 

tfS i; T 7 ^ -t x;l/-* t i: t }c#i6 e> n S ;I/-;l/T-fe 
So fnfyv-zWi, w*tf, ifgoy-xfeitffxf 

-ty, ffl*«nfc7^u^-s/3^ y*- 

b^n*S/*4^H:77^7f*-;P7K5-^H^- 20 
*E«koT, 8J£©*y F7-*-fe<y5'3yEflHB*5 

«;u-*«, fey a vfflfcwssn* c t 1 bhh 

*T**o ftW^WcJintf, ;l/-;M*y ha>ft*y 
n-Ft*cfc*B#t*<:i:ft<, 5*&ftfc;l/-;l/ 

[00 8 3] KiW;W-;VOfif!i:LTH:, H-<D-fe -y 3 
:/EJtLT©*flli#>5ftS tyyZJh] 30 

*F^;l^7'J&£*r3rt/-M«>S. c©fiW/l/-;V 
EJtitf, 7^X*-;H:y hOflSOlBS*SH*"f 
E, *x F«ita*5i^ttlWBrr*«fc5E*z h^;U- 

^^©^^JO^yy 'Ir-v's yEfett5;U- 
;Hr-y h7y 7£g^ET5/ci6Efflt^tt5<k©tf;£ 
*„ flRtf, FTPyo+>'7y , jy— >3Vfi. KM 40 

*;l>©lte©«IS*5**CitfW!ll?**, C©WE 
%tihWfafr-Mt.s HRE, FTPW»-feyS/3>* 
fflUT? , -*B*tf&i£tlSST?ttn-F*nt\ £ 
fc, 1 @©ffifflEH£Sft, $iJRI$nfcWHOKO*7 
?TY7t2ttS 0 S!oT, *-;V-fe-y h(i, T^T© 

a*»*Kfk«n*i:i:fcK, •fe*aUf'-f*'a»«n 

5o 50 
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[0 0 8 4] 5. 7u*S/gjf 
*«WfcJ:*^n*S'K»4:M:, *yh7-^-fev>3 

y^u^hUca. 77-r77*-;i/*ai;TB«o 

rXr a V^STf *>©■?& 5„ S?bi/'"b7^3 
ytf77-f77*-/l/EA3fc, 7'n^S/-9— ^(c<t§ 

*•>+>•- /<E«k*-»j— exam*stiT^5*i^ 77 

UX*, 7n * 5/ 7 7 y * - 3 >©# X F 7 F T 
&BT*ntf, 7r^77*-/Wi, tf- 

y-5r— >3>tt, ZV-bvi/ayZgimZts fXf 

^ 3 vmo n * * 3 yotinfijb^^. e> nr i > 5 

T, ; eo-fe>yi/3>'<DfctOrXr-('^-v'3y7KL/ 
X£B#?5 0 Tn+i/tf, tS©IP7Fl/ 

flMtS!£, 77-f77*-;l/fcJ;-3T»ttSft*"»J- 

[0 0 8 5] a-tf*«i:tf7*n*S'77 , y*-5'a:/E 
i^Ttt, tZtj*—. 5'3yfc*^T3***>3y*< 

a:, v-xi p7FI/x*&4ut, B#sn/t-9--e 

XEtt LT1M >7 7 7Xfc3.— If \L-m if 5 *» 

*«B*s?-e*©»$E3Ttt£*. coii*tt % 
?n«, «:o^, H}3**^ayoy-^7Kuxtt 

•J h 7°P+'>^e 1 1 <0a-f ! cD7-X7 K UXE 

[0086] unELmtiZMmzrcit), yn^j 

A*vh7-f-b-y5/3>0ff||*B*r5 0 7r^7 

7*-;Wi. W3*^s/3yefl9^5*-h»^*jS 

7 >T 77 V-^7FUX*iEU^a.— ifv- 
X7FUXEVye>^5CfcffT*6«fc5E, iEL 

v^ai3*^j/3>%iwij-r«cfc*«-e**. *©e«, 

T'o+S/77'yy-^3>'ttW*0^— r-fEtta*4 
[0 0 8 7] ^n+^RW^StSKlt, Hi 1 fe«k 

[o o 8 8] 0 1 it, 7'n*$/EiMaa*Bijjvr*. 

cn«, 7 7'T77*-;VE*3^5WT<0Xr>y7^ 
[0 0 8 9] 1 0 0 1 : /^-y F*»77-Y77*-*E 
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[0 0 9 0] 1 0 0 2 :S34-feyS'3y*+ry$'a* 

^<yHBatt««Stl*. 7**3 rugj 

[009 1] 1 003: 7*5/3 Vtf, 77*77*- 
;l/±?n-£;Wc^#-h£n37°n*5'77 , yy-5/ 10 
3>*^LTl>*«^ ><4ryhtt, 7°nfo;l/X*7 
7*atT, ft$*<D7 p a*5/77 , y7--: ^3>^jM6. 

[0 0 9 2] 1 00 4 : 7*3/3 ytf'J*-h7n*5/ 
£*LTI^5S£, hOf^^->3 V7 H 
UXtfyt-h7 p n*5><7)7Fl/XT*gf&x.e>tt3o 

nfcffl t i: K-t 7 5/ 3 a- 7 5/i t aaisn*o 

[0 0 9 3] 1 00 5 :^<77 HtV^-Vfuf-i/V 20 
[0 0 9 4] H12K. yt-hT'n+S/fcfcH-*, X 

x7 / 1 o o 5 1«< ftasw^-rs. ctittfitTo* 

r 7 

[0 0 9 5] 1 0 06 Mtyt-hT'n+S/tf 

[0 0 9 6] 1 00 7 : Ut-hyo+S/tt, 7r-f7 
7*-/WCj*LT, ^7 hOfcfcO-b-yS/3>+-* 

[0 0 9 7] 1 008 : y*-b7 , n*5/77'y*--5' 30 

xturrs) *%m%o y*-b^o*s/««*-K 

«*ffl^T<^4«£, T'n-feXttXrryT'l 0 1 1KJR 

[0 0 9 8] 1 0 09 : yt-h/n+i/77yy-^ 
aXi, m*fl:Sftfc*+*;l/*ai;T, 77*77* 

[0 0 9 9] 1 0 1 0 : 77*77*-Mt, 
503**S/3>OH*tt*fiME , r*«rU^TXf , Y* 
-*>3V#-h»^*ttSt*. 77*77*- /WiC 
Off U>#- H#9feJ;tffci:0-fe'y5/3 y^-fcTn 

*j/77'yy-s/3yK5gr. 

[0 10 0] 1 0 1 1 : Ut-h7'n*S/77'yy-S/ 
3>H\ 77*77*- MCJtLT, SB*^tt<Dr 
X f - -f *- > 3 V\© ^ * * 5/ 3 y K Ht 5 «F Rl*R* 
t*. 

[0101] 1012: 77*77*-;Wi, flW;U- 50 
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;U£o- KLTC0773/3 y%9ffitto 
[0 10 2] 1 0 1 3 : yt-h7*a*J/«, ^-77 h 
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